Data Protection Consultant (UK GDPR, EU GDPR and International Data Transfers)

Join the Intelance associate panel. The first engagement starts in late October 2026, subject to client approval.

Intelance is a UK advisory firm working on technology governance, cyber security and data governance. We are looking for an experienced data protection consultant to help a UK non-profit get the data protection terms for its online supply chain platform right. The platform has users in the UK, Europe, the US and Asia, including China. You will work with an Intelance engagement partner, and the client's own solicitors will approve the final legal wording.

Tasks

• Review the data protection and security sections of the platform's terms of use, and redraft them so they are clear and consistent.

• Set out the client's position as data controller when users in other countries can see data that is stored in the EU, and the safeguards it needs.

• Check the supplier's data processing agreement against how the platform is really used.

• Write plain English answers to the data protection questions that platform users keep asking.

• Prepare a short list of points for the client's UK solicitor to confirm, and work alongside a law firm that is advising on China's data protection law.

• Hand over cleanly to the Intelance colleague who will update the client's data security policy.

Requirements

• 5 years or more working in data protection or privacy, as a consultant, data protection officer or in-house adviser.

• Hands on experience of international data transfers under UK GDPR and EU GDPR, including Standard Contractual Clauses, the UK International Data Transfer Agreement or Addendum, and transfer risk assessments.

• You have reviewed or drafted terms of use, data processing agreements or privacy notices for a software platform.

• A recognised qualification such as CIPP/E or the BCS Practitioner Certificate in Data Protection.

• You write short, clear documents that people outside legal and IT can act on.

• Right to work in the UK, and able to work through your own limited company or as a self-employed contractor.

• Desirable: working knowledge of China's Personal Information Protection Law (PIPL).

• Desirable: experience with charities, standards or certification bodies, or supply chain platforms.

Benefits

• Day rate of £500 to £625, depending on experience.

• About 2 days of work over the first 2 weeks, with a short follow-up if the client's solicitor raises points.

• Fully remote within the UK, with flexible hours.

• Contract role through your own limited company or as a self-employed contractor. We expect it to fall outside IR35, and we confirm this before you start.

• A place on the Intelance associate panel for future data governance work.

Apply with your CV and answer the short screening questions. It takes about five minutes.

We reply to every applicant within three working days. If you are shortlisted, you will have a 30 minute call with us. You join the panel once you sign our panel agreement and NDA. Please do not apply through an agency.

Originally posted on Himalayas